Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: ZiPAa45QcEF4old901Y/Mstrj9vQROJ1Rrml5yITJdU=
Subject key identifier: 51:21:02:D9:E9:C8:EA:13:5D:1C:DE:A1:51:90:E5:74:98:53:59:38
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 63BBF6C6C57FACAC64D60FF4A08CD830F29003F4
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
Signing time: Thu 20 Aug 2026 13:53:38 +0000
ROA not before: Thu 20 Aug 2026 13:48:38 +0000
ROA not after: Thu 19 Aug 2027 13:53:38 +0000
asID: 6079
IP address blocks: 143.20.186.0/24 maxlen: 24
143.20.198.0/24 maxlen: 24
143.20.211.0/24 maxlen: 24
143.20.223.0/24 maxlen: 24
143.20.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bb:f6:c6:c5:7f:ac:ac:64:d6:0f:f4:a0:8c:d8:30:f2:90:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 20 13:48:38 2026 GMT
Not After : Aug 19 13:53:38 2027 GMT
Subject: CN=512102D9E9C8EA135D1CDEA15190E57498535938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:cb:8f:f8:10:de:aa:26:97:74:12:6e:e1:
33:85:56:97:e0:38:25:92:a7:b4:c4:d2:38:03:64:
58:7f:9c:db:8e:ff:ca:5f:a4:ef:28:c3:a5:f2:74:
84:58:01:fb:db:7d:3c:69:74:68:04:08:65:be:0c:
91:85:4b:74:8b:aa:dc:52:09:e6:4f:f9:64:8f:d8:
04:ef:75:a1:86:e1:d3:0c:d8:d1:82:56:7d:99:54:
2d:f3:aa:d7:64:b0:a3:81:aa:46:89:3e:89:39:6c:
61:e6:01:53:0a:52:18:9a:74:59:84:6b:2e:87:20:
c2:e7:f6:f3:57:56:c7:20:8d:90:90:4d:4f:04:cb:
c5:ef:25:82:65:b4:82:90:81:35:8b:43:7d:ef:ad:
a0:53:7c:e6:0f:aa:ec:93:e2:44:c1:14:dc:fa:9e:
00:4a:46:68:12:12:33:95:0d:42:12:a9:29:9a:5f:
fc:0f:43:fe:22:76:36:cc:54:c2:99:23:ab:61:70:
23:8d:4b:63:18:5d:f1:7c:ca:1c:d1:27:12:2d:3d:
f7:a1:81:c4:35:84:5c:b7:30:a1:c6:9a:95:c1:74:
3e:3c:aa:e9:eb:de:99:36:cf:9d:df:63:bb:46:3c:
cf:4c:e2:d3:d9:1e:ff:cf:02:d2:9b:07:64:ee:04:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:21:02:D9:E9:C8:EA:13:5D:1C:DE:A1:51:90:E5:74:98:53:59:38
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.186.0/24
143.20.198.0/24
143.20.211.0/24
143.20.223.0/24
143.20.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:20:3e:0d:2e:b2:bc:1e:28:8e:71:f4:87:42:69:85:25:8d:
0c:5f:26:4a:96:f2:8c:56:d7:66:20:d6:b5:ad:c1:fc:70:cb:
6b:78:99:79:a3:ee:4b:f8:16:53:fd:3a:d7:a4:e8:04:28:33:
1e:02:37:d7:8f:55:21:78:63:08:83:8a:46:5e:9e:b4:58:cc:
11:5c:56:5f:8f:d2:8a:73:09:0c:0a:6f:a4:0a:bf:5f:a7:99:
83:fd:c1:1d:b7:94:0f:b0:ac:b4:e6:e1:fb:48:72:8d:e2:4f:
07:04:c1:9d:dd:bf:30:a6:96:74:c1:13:79:e8:c2:9b:81:fd:
e7:8d:66:3d:28:0e:5e:e0:97:f5:73:1e:78:25:f6:be:5c:4c:
fe:cb:2e:b3:e3:b8:58:99:18:03:13:86:bd:c5:76:c8:16:56:
cc:88:57:b9:12:f4:f2:16:0f:99:86:65:20:26:cb:4a:6a:26:
4b:d0:14:84:7c:cb:d7:a4:46:31:73:f7:0d:30:93:8b:40:ff:
d6:9f:cc:40:76:88:41:b0:03:f2:73:01:e9:12:74:16:07:37:
e2:01:f4:9b:25:8a:05:9b:3a:6e:83:c1:f5:fb:fe:7c:b6:d0:
03:5b:58:95:0a:78:6d:83:84:0d:aa:35:43:bb:1f:cf:24:1d:
60:9e:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 07:14:26 2026 by rpki-client